Ubuntu.comUB:CVE-2021-4166CVE-2021-4166
7.1 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H
5.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:N/A:P
0.001 Low
EPSS
Percentile
38.5%
vim is vulnerable to Out-of-bounds Read
Bugs
Notes
| Author | Note |
|---|---|
| ccdm94 | code in bionic and earlier does not include file src/arglist.c, which is the patched file. The patched code for these releases seems to be instead present in src/buffer.c, as seen in commit 4ad62155a10. Changes that led to the creation of file arglist.c and changes made to the code that follow the creation of this file are significant, which would result in an intrusive backport should the altered CVE patch and other necessary changes be applied in bionic and earlier. Consequently, the issue will be marked as ignored for the previously mentioned releases. |
Related
7.1 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H
5.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:N/A:P
0.001 Low
EPSS
Percentile
38.5%